Known vulnerabilities in vCenter Server 6.7.0 - page 2

Vendor: Broadcom
Software: vCenter Server
Version: 6.7.0
Software CPE: cpe:2.3:a:broadcom:vcenter-server:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 35
Public exploits: 10
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting vCenter Server version 6.7.0 vCenter Server 6.7.0 is affected by 35 vulnerabilities: 3 critical, 4 high, 15 medium, 13 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56809 - Improper input validation
CVE-2021-22020		 CWE-20 Low
No
No
 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56808 - Improper input validation
CVE-2021-22019		 CWE-20 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 2 more
#VU56800 - Improper Authentication
CVE-2021-22011		 CWE-287 Medium
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2d 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU56791 - Permissions, Privileges, and Access Controls
CVE-2021-21991		 CWE-264 Low
No
No
 6.5 U3q, 6.7 U3o, 7.0 U2c 21.09.2021 SB2021092117
SB2021092118
SB2021092918
and 3 more
#VU53596 - Improper Authentication
CVE-2021-21986		 CWE-287 Medium
No
No
 6.5 U3p, 6.7 U3n, 7.0 U2b 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more
#VU53595 - Improper input validation
CVE-2021-21985		 CWE-20 Critical
Public exploit available
Exploited
 6.5 U3p, 6.7 U3n, 7.0 U2b 26.05.2021 SB2021052634
SB2021101003
SB2021120331
and 3 more
#VU50899 - Server-Side Request Forgery (SSRF)
CVE-2021-21973		 CWE-918 Medium
Public exploit available
Exploited
 6.5 U3n, 6.7 U3l, 7.0 U1c 24.02.2021 SB2021022401
SB2022102127
SB2022102128
and 2 more
#VU50898 - Improper input validation
CVE-2021-21972		 CWE-20 High
Public exploit available
Exploited
 6.5 U3n, 6.7 U3l, 7.0 U1c 24.02.2021 SB2021022401
SB2022102127
SB2022102128
and 2 more
#VU26758 - Improper Access Control
CVE-2020-3952		 CWE-284 High
Public exploit available
Exploited
 6.7 U3f 12.04.2020 SB2020041203
SB2022110115
SB2022110217
#VU21149 - Cleartext Storage of Sensitive Information
CVE-2019-5534		 CWE-312 Low
No
No
 6.0 U3j, 6.5 U3, 6.7 U3 17.09.2019 SB2019091707
#VU21148 - Cleartext Storage of Sensitive Information
CVE-2019-5532		 CWE-312 Low
No
No
 6.0 U3j, 6.5 U3, 6.7 U3 17.09.2019 SB2019091707
#VU14412 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3646		 CWE-200 Low
No
No
 5.5u3j, 6.0u3h, 6.5u2c, 6.7.0d 15.08.2018 SB2018081502
SB2018081505
SB2018081508
and 36 more
#VU14411 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3620		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081506
SB2018081508
and 35 more
#VU12914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3640		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052802
SB2018070908
and 8 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more


Showing elements 21 - 40 out of 35